Conversation

Notices

1. Embed this notice
   wlf_warren (wlf_warren@pebble.social)'s status on Saturday, 18-May-2024 11:53:06 JST wlf_warren

   #T2Pub

   💷💷 ** GCash ** 💵💵

   Users warned of scammers targeting accounts using fake emails.

   In a statement, CICC Executive Director Alexander Ramos revealed that scammers

   Have begun sending fake emails via platforms like

   ** Viber and Facebook Messenger **

   Rather than the traditional SMS messages.

   Ramos also cited that the number of scam text messages has "declined significantly"
   since the implementation of the

   SIM Registration Act on Dec. 27, 2022.

   https://mb.com.ph/2024/5/16/g-cash-users-warned-of-scammers-targeting-accounts-using-fake-emails

   • Embed this notice
     Yohan Yukiya Seseㆍ사요한・謝雪矢 (youronlyone@c.im)'s status on Saturday, 18-May-2024 11:53:03 JST Yohan Yukiya Seseㆍ사요한・謝雪矢

     in reply to

     @wlf_warren

     > declined significantly

     LMAO.

     I guess for those people who got more garbage SMS _after_ the SIM registration took effect are, what, unlucky? Dumb? Stupid? Posted their numbers publicly?

     > GCash has reported blocking four million accounts in 2023.

     A good chunk are legitimate accounts, but they cannot recover their accounts because GCash's procedure guarantees that you won't recover your account again.

     At least two people I know lost their account, one used for business, one personal. One Level 3 verified, one Level 2 verified. And both have thousands of Pesos in it.

   • Embed this notice
     Yohan Yukiya Seseㆍ사요한・謝雪矢 (youronlyone@c.im)'s status on Saturday, 18-May-2024 19:00:22 JST Yohan Yukiya Seseㆍ사요한・謝雪矢

     in reply to

     @wlf_warren Yep.

     Also, the GCash app hate any devices with Developer mode set to ‘on’.

     It is part of the Philippine fintech movement to “blame the customers instead of improving our security”. It started last year 2023.

     Their argument is that the accounts of their customers are getting compromised because of the #Android #Developer mode.

     I highly doubt half of those compromised account have Developer mode ‘on’. I know a lot of people who don't even know what in the world “Developer mode” is, yet their accounts were compromised regardless. And I'm seriously tired of it because they all come to me when I don't even work for GCash (and if I can't help them, I'm suddenly ungrateful, blah blah blah).

     Anyway, to _supposedly_ solve it, banks and fintech companies are now blocking all devices with developer mode ‘on’.

     LOL. GCash even added “another layer of security”: they won't allow anyone with the setting “install from other sources” turned on. Guess what? There are highly popular brands from China/Taiwan with “install from other sources” turned-on by default. The phone that was stolen from me was one such model and brand. There just was no way to turn it off (unless you root it, which itself will be detected as well).

     I stopped using GCash after that. I can't even use their app.

     Basically, banks and fintech in the #Philippines are implementing “security measures” that are not even the the reason why their customers' accounts are getting compromised.

     Instead of improving their systems, they blame their customers.

     For example. BPI is the largest and richest bank in the country. Yet to this day, they still rely on SMS two-factor authentication, which is the weakest of all 2FA methods. All it takes is a simple social engineering, and most people fall for that and they don't even know it (there were cases of these back in, more or less 2018 but nope, they did nothing, they just blamed their customers). Or, get your phone stolen. Ordinary thieves are far more knowledgeable than we are giving them credit for.

   • Embed this notice
     wlf_warren (wlf_warren@pebble.social)'s status on Saturday, 18-May-2024 19:00:23 JST wlf_warren

     in reply to

     • Yohan Yukiya Seseㆍ사요한・謝雪矢

     @youronlyone

     Oh crap!

     Not good, yeah it has been a pain in the butt for many, especially those who are outside the Philippines and may have a SIM but failed in being able to provide a local address, DL or Govt ID like a postal one) etc ... for registration.

     There are ways around 😉😉 (*wink*wink*) though, as he/ she knows 🤔👍🏻💯😁

     Really not worth the security they say, and as you, the losses 😒😶🫥